« Changelog History


angular.js v1.5.9 Release Notes

Release Date: 2016-11-24 // over 7 years ago

  • 🚀 This is an interim release primarily to publish some security fixes, in particular a modification to 👕 ensure that AngularJS can pass the linter checks for Mozilla add-ons.

    🔒 Security Fixes

    • bootstrap:
      • do not auto-bootstrap when loaded from an extension (6ce291)
      • explicitly whitelist URL schemes for bootstrap (#15427) (4edd2d)
    • $location: throw if the path starts with double (back)slashes (353e3a)
    • $sniffer: don't use history.pushState in sandboxed Chrome Packaged Apps (367da5)
    • 📜 $parse:
      • block assigning to fields of a constructor prototype (d7e31b #14939)
      • correctly escape unsafe identifier characters (b01460)
    • $compile:
      • ensure that hidden input values are correct after history.back (6a2488)
      • lower the $sce context for src on video, audio, source, track (68fb70)

    🆕 New Features

    • input:
      • add support for binding to input[range] (2e7121)
      • make support for input[range] opt-in (07b876)
      • fix step validation for input[number][ng-range-input] (64f6a6 #15257)
    • ngMock/$httpBackend: flush requests in any order (098b6f)

    🐛 Bug Fixes

    • $httpBackend: complete the request on timeout (549edc #14969)
    • ngOptions: remove selected attribute from unselected options (d31b3a #14892)

    🐎 Performance Improvements

    • 📜 $parse: improve performance of assignment expressions (f83c3d)
    • $compile: add provider option to turn off compilation of css class and comment directives (775c24)